THE UNIFORM PRIMALITY CONJECTURE FOR 
ELLIPTIC CURVES 



GRAHAM EVEREST, PATRICK INGRAM, VALERY MAHE, SHAUN STEVENS. 

Abstract. An elliptic divisibility sequence, generated by a point in the 
image of a rational isogeny, is shown to possess a uniformly bounded 
number of prime terms. This result applies over the rational numbers, 
assuming Lang's conjecture, and over the rational function field, uncon- 
ditionally. In the latter case, a uniform bound is obtained on the index 
of a prime term. Sharpened versions of these techniques are shown to 
lead to explicit results where all the irreducible terms can be computed. 



1. Introduction 

The Mersenne problem asks if infinitely many integers of the form 2 n — 1 
are prime. More generally, if a > b are positive coprime integers, one can 
ask if the sequence 

v.-(^) CD 

\ a-b ) n>x 

has infinitely many prime terms. The answer is negative if a/b is a perfect 
power. For example, if a = A 2 and b = B 2 , with A and B G Z, then the 
terms factorize as 



V„ 



A n -B n \ fA n + B 



A-B \ A+B 



for n odd and 



' A n — E n ' 



for n even. It is easy to see that neither factor may be a unit when n is large 
enough. Indeed, since the greatest common divisor of the two terms on the 
right (in either expression) is easily controlled, there are few possibilities for 
V n to be a prime power, a remark germane to this paper. 

Let E/Q denote an elliptic curve, given by a Weierstrass equation with 
integer coefficients, and let P £ E(Q) denote a non-torsion point. One can 
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always write 



with A n ,B n , and C n G Z, and gcd(A„,f? n ) = 1. The sequence (-B n )n>i 
is an elliptic divisibility sequence. These sequences have been the focus of 
attention of a number of authors: consult [3[a[6l[7l[8l[l3l[23l[Ml[29l[3Ql[3ll 
[32| [33] . The role of an elliptic divisibility sequence relative to the addition 
law of E(Q) is analogous to the role of the sequence ([1]) relative to the 
multiplicative group of Q. It is unlikely that B n will ever be prime, because 
of the relation B\ \ B n . It is natural, as in the multiplicative case, to ask 
when B n /B\ might be prime, or a prime power. 

1.1. Background. Chudnovsky and Chudnovsky [2] considered the ques- 
tion of prime occurrence in elliptic divisibility sequences computationally, 
finding some examples of prime values which are large (several hundred dec- 
imal digits) in comparison with the starting data. These computations were 
not easy on several counts. For one thing, the terms grow very rapidly - the 
logarithm is quadratic in the index, and proportional to the global canonical 
height. Also, there was a shortage of known small height points. Finally, 
the computing power at the time was much less than what is available to- 
day. With the examples to hand, searching was feasible only out to index 
around n = 100. Much larger prime terms in elliptic divisibility sequences 
have been found recently. 

Example 1.1. Consider 



The following table shows indices n for which B n is prime (actually, a Miller- 
Rabin pseudo-prime to 10 randomly chosen bases), together with the number 
#B n of decimal digits of B n : 



n 


5 


7 


8 


9 


11 


12 


13 


19 


23 


29 


83 


101 


409 


1291 


#B n 


1 


1 


1 


1 


2 


2 


2 


4 


6 


10 


77 


114 


1857 


18498 



The final two primes were found by Brid Ni Fhlathum (1999) and the first 
author (2006) respectively using MAGMA [17J and PARI-GP [H]. The 
largest takes a couple of hours to test for (pseudo-) primality. 



Bearing in mind that all of these examples have appeared at the outer 
limits of what is computationally feasible, at the time, this might suggest 
that some elliptic divisibility sequences contain infinitely many prime terms. 
On the other hand, in [5], all of the examples from [2] were tested out 
to n = 500 but no more prime terms appeared. Furthermore, while it is 
true that the primes in Example 11.11 are large, this sequence has, up to 
the present, produced only 14 prime terms. It also manifests a pattern 
witnessed in several examples (see the table in section T4.2p . namely, that 
a gap principle seems to be at work. What this means is that the gaps 
between prime terms grow quickly in proportion to the index. Taking this 




E : y 2 + y = x 3 - x with P = [0, 0]. 
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together with the quadratic exponential growth rate of the sequence forces 
any outlying prime term to be inordinately large. In section 14.2^ the results 
of extensive computations are exhibited, showing the appearance of prime 
terms in elliptic divisibility sequences generated by the 18 rational points 
with smallest known global canonical height in Elkies' table |10| . These, 
together with all the computations performed for this paper, used both 
[17j and [21J. Together with a heuristic argument from [5] (revisited in 
section 14. ip . this indicates that the case of elliptic divisibility sequences 
could be quite different from that of the multiplicative sequences ([I]), and 
lends support to what we believe could be true, namely: 

Conjecture 1.2. If B = (B n ) denotes an elliptic divisibility sequence gen- 
erated by a rational point on an elliptic curve in minimal form, then the 
number of prime terms B n jB\ is uniformly bounded, independent of curve 
and point. 

In [7] it was demonstrated that if P £ E(Q) lies in the image of a non- 
trivial isogeny then B n can be prime (indeed a prime power) for only finitely 
many n. When the isogeny is the endomorphism [k] (multiplication by the 
integer k), this is in direct analogy with the trivial case for sequences of 
the form ([1]), discussed earlier. The proof follows by giving a preliminary 
argument showing the existence of a canonical factorization, then estimates 
arising from a strong form of Siegel's Theorem show that each factor is too 
large to be a unit. 

In the current article, a proof of Conjecture 11.21 will be provided, assum- 
ing Lang's Conjecture, in the case where P lies in the image of a non-trivial 
isogeny. The methods include the use of a quantitative version of Siegel's 
Theorem proved by Silverman. As the question entails the application of 
results from diophantine approximation, it is also interesting to consider 
the problem over the function field Q(T), where stronger diophantine ap- 
proximation results are known (for example, Lang's Conjecture). Stronger 
conclusions do indeed become possible. 

1.2. Main Results. Let K be Q or Q(i), and let O k be Z or Q[t] respec- 
tively. Let E be an elliptic curve over K and P 6 E(K); then we can 
write 

<P) = ^ 

Dp 

with Ap,Bp 6 Ok coprime and Bp > in the case K = Q, or Bp monic 
in the case K = Q(i). 

Much of the discourse assumes a conjecture of Lang, which arises nat- 
urally, and appears to be a necessary assumption in any attempt to solve 
Conjecture 11.21 This conjecture will now be stated and relies upon defini- 
tions provided in full in section 12.11 It is known that the canonical height 
h{P) is zero if and only if P is a point of finite order, so it is natural to 
ask how small h(P) might be for non-torsion points P. This question turns 
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out to be quite important: in general, quantitative estimates for diophan- 
tine approximation on elliptic curves all rely on some sort of lower bound 
on h(P)/h(E), where h(E) is the height of the curve. Considering elliptic 
curves in general, it is not hard to show that h(P)/h(E) can be made arbi- 
trarily small (without resorting to choosing torsion points P). For minimal 
curves E/K, however, this seems not to be the case. 

Lang's Conjecture. There exists 5 > 0, which depends only on K, such 
that h(P) ^ 5 max{l, h(E)}, for all minimal curves E/K and all non- 
torsion points P G E(K). 

Our main results use a definition which appeared first in [7J and in a more 
general form in [6]. In [7J, some crude counting amongst small conductor 
curves suggested that when K = Q, the definition applies in a very large 
number of non-trivial cases. 

Definition 1.3. If P € E(K) is non-torsion and is the image of a X-rational 
point under a non-trivial X-rational isogeny, then say that P is magnified. 

By composing the pre-image of the isogeny with an isomorphism if nec- 
essary, it may always be arranged that the pre-image is in minimal form. 
This will be a standing assumption throughout the paper. 

In the rational case, the main theorem of the paper follows (see Theo- 
rem [2J] for a more precise version): 

Theorem 1.4. Assume K = Q and B is an elliptic divisibility sequence 
generated by a magnified K -rational point on an elliptic curve in minimal 
form. If Lang's conjecture holds then the number of prime power terms 
B n /B\ is bounded independently of the curve, the point and the degree of 
the isogeny. 

When K = Q(i), as anticipated, an unconditional version of Theorem ll.4l 
holds. A bigger surprise is the different character of the main conclusion. 

Theorem 1.5. Assume K = Q(i) and B is an elliptic divisibility sequence 
arising from a magnified K -rational point on an elliptic curve in minimal 
form. Then B n /B\ fails to be a prime power for all indices n ^ 4160366. 

The different nature of the two results is worthy of comment and sections 
[3] and are given over to a full discussion of the different cases. At this 
point, the following question seems worth asking, it is one that we have not 
been able to resolve. 

Question In the case when K = Q, assume that B is an elliptic divisibility 
sequence generated by a magnified /T-rational point on an elliptic curve in 
minimal form. If Lang's conjecture is true, does it follow that B n jB\ fails 
to be a prime power for all n beyond some uniform bound? 

A positive answer to this question is certainly desirable, because it means 
that a large class of explicit examples can, at least hypothetically, be tested 
to find all the prime terms. With current techniques, explicit examples do 
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exist [9] (see also Example 14. ID . but for a limited class of curves. Theoreti- 
cally too, a positive answer is satisfying because it means that the two cases 
when K = Q and K = Q(t) are exactly parallel, assuming the generating 
point P is magnified. Note however that, over K = Q(i), the primality 
conjecture itself is not likely to be true - a discussion, which includes some 
striking examples, follows in section [31 

In the next section, a proof will be given that, under Lang's conjecture, 
a uniform bound exists for the number of prime terms B n /Bi which applies 
in both the rational and the function field cases, assuming the elliptic divis- 
ibility sequence is generated by a magnified point on a minimal curve. This 
section highlights the convergence of the two theories. In sections [3J and EJ 
which follow on, various points of divergence will be discussed, often with 
reference to explicit examples. 

2. The Uniform Primality Conjecture in Both Cases 

2.1. Notation. The following notation will be standard throughout: 

K either Q or Q(i); 

O k either Z if K = <Q> or Q[t] if K = Q(t); 

v a prime of K with completion K v , ring of integers O v ; 

log |. |oo either log(|.|) if K = Q or deg if K = Q(t); 

/i(|) the height of | defined, for p,q £ Ok coprime, by 
Kq) '■= m a x (log|p|oo,log|g|oo); 

E an elliptic curve over K 

A or the discriminant of E; 

j or je the j-invariant of E; 

h(E) the height h(E) := ^ max(h(J), h(A)) of E; 

P a point of E(K); 

h(P) the height h(P) := \h{x{P)) of P 

h(P) the canonical height h(P) := lim h ^ n -f ^ of P; 

n >oo n 

Generally speaking, when the existence of a uniform constant is postu- 
lated, what is meant is a constant independent of the choice of the elliptic 
curve (and the point studied if there is one). Of course, such a constant may 
depend on the choice of the base field K. 

2.2. Reduction to Siegel's Theorem. For ease of exposition, define the 
Lang ratio of P G E(K) to be p{P,E) = h{P)/ max{l, h(E)}. Then Lang's 
conjecture says that there exists 5 > such that 

for all minimal curves E/K and all non-torsion points P E E{K). Silver- 
man p?| has shown, for number fields K, that p(P, E) may be bounded 
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below in terms of the number of primes at which E/K has split multi- 
plicative reduction. Expanding on these ideas, Hindry and Silverman 
showed that p(P, E) may be bounded below in terms of an upper bound 
on the Szpiro ratio of E/K, that is, the ratio of the log-discriminant of 
E to the log-conductor. Hindry and Silverman also showed that if if is a 
one-dimensional function field, then the Szpiro ratio of an S'-minimal elliptic 
curve (where S is a set of primes of K) is bounded above absolutely in terms 
of S; in particular, with S = {00} , Lang's Conjecture holds. In this paper, 
it will often be convenient to work in terms of p(P, E) in order to obtain 
unconditional results. 

The following is a more precise version of Theorem 11.41 valid both for Q 
and for Q(t). 

Theorem 2.1. For any 5 > 0, there is a constant Mg with the following 
property: Let B = (B n ) be an elliptic divisibility sequence arising from a 
magnified K -rational point P on an elliptic curve E in minimal form. Write 
a : E' — > E with E' in minimal form, and cr(P') = P. If p(P' , E') ^ 5, then 
the number of prime power terms B n /B\ is bounded by Mg. 

In light of the above-mentioned results of Hindry and Silverman, in the 
case K = Q(t), there is a uniform constant 5 > such that the condition 
p(E',P') ^ 5 is always satisfied. If Szpiro's Conjecture holds, then this is 
true of K = Q as well. 

Similar methods allow a result of the following kind: 

Theorem 2.2. For any 5 > 0, there is a constant C$ with the following 
property: Let <p : E' — > E be an isogeny of minimal elliptic curves, then for 
any subgroup T' C £"(Q) such that minp/ G r/ {/?(£", P')} ^ S, 

#{P £ </>(T') : Bp is a prime power} ^ ^i+ rank ( r )_ 

It follows immediately that the number of prime power terms in the se- 
quence (B n ) n ^i is bounded uniformly. This observation is not nearly as 
strong as Theorem 12.11 unless one restricts attention to sequences in which 
B\ = 1, which are in some sense rare (corresponding to integral points on 
elliptic curves). 

2.3. Behaviour Under Isogeny. The first lemma shows how primes be- 
have under isogeny, and demonstrates that the denominators of points in 
the image of an isogeny admit a canonical factorization - see ([6]). 

Lemma 2.3. Let E be a minimal elliptic curve defined over K , and let 
a : E' — > E be an isogeny of degree m. Then we have 

v{B P )^v{B a{P) ). 

If E' is also minimal, then v(Bp) > implies 

v{B a(P) ) ^v(B P )+v(m). 
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Proof. On the assumption that E' is minimal at v, it is not hard to show 
(see, for example, the exposition in [32]) that the isogeny a induces a map of 
formal groups F a : E' — > E defined over O v with F a (0) = (Streng proves 
this for number fields, but the proof works for any local field). It follows 
immediately that if v(x(P)) < 0, as F a (z) G vanishes at 0, 

v{B a{P) ) = v(F a (z)) > v(z) = v(B P ). 

If E is minimal as well, we may apply the same argument to the dual isogeny 
a : E — > E' , noting that the composition is [m]. The argument above now 
tell us that 

v(B a ( P )) < v{B mP ) < v(B P ) +v{m). 

□ 

Lemma 2.4. Let E and E' be minimal elliptic curves defined over K, and 
let a : E' — » E be an isogeny of degree m. Then 

h{E) < h(E') + h(m). 

Proof. In the number field case, this is a consequence of the Normalizing 
Lemma of Masser and Wiistholz [19J. Note that Masser and Wiistholz use 
the quantity 

w(E) = max{l, h(g 2 ), h(g 3 )} 

to measure the 'size' of an elliptic curve, where g 2 and g^ are the usual 
invariants, but h(E) as defined above satisfies w(E) <C h(E) <C w(E). The 
argument in [19] produces some isomorphic copy of E, say E* /K such that 
h(E*) -C h(E') + logm. Since E and E* are isomorphic, and E is minimal, 
we have h(E) ^ h(E*). 

If if is a function field, this property is trivial by the boundedness of 
the Szpiro ratio, together with the inequality deg(A^/) ^ 6deg(A£). To 
see this, note first that E and E' have the same conductor, by \12\ VII 
Corollary 7.2]. The assertion is then a consequence of [221 Theorem 0.1], 
which bounds the conductor of E' in terms of 6deg(A^/), since the degree 
of the conductor of E is a lower bound for deg(A^). Note that if we assume 
the abc conjecture for K, we may do the same thing for number fields, but 
a dependence on m still exists. □ 

Now we return to the main theme of this section, by showing how to 
reduce the problem to an application of Siegel's Theorem. 

Definition 2.5. Given < e < 1, together with a constant C > 0, say that 
P E E(K) is (e, C)- quasi-integral if 

h(B P ) ^ eh{P) + C. 

Siegel's Theorem, in its strong form, is the statement that for any e < 1 
and any constant C, there are only finitely many (e, C)-quasi-integral points 
in E{K). Work of Silverman [27] refines this claim, showing that the number 
of (e, C)-quasi-integral points in a subgroup V C E(K) may be bounded 
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solely in terms of e, C, rank(r), and a lower bound on p(P, E) for non-torsion 
P £ T. Elliptic divisibility sequences are essentially rank one subgroups of 
E(K), and so under Lang's Conjecture a uniform bound is obtained on the 
number of (e, C)-quasi-integral points in an elliptic divisibility sequence. 
Note that if 

Ch(E) > 5h(nP), 

then |n| y/C / (6p(P, E)) . 

In particular, applying Silverman's version of Siegel's Theorem to a rank- 
one subgroup of E(K) generated by some point P with p(P, E) greater than 
some uniform value, some dependence of C on E is acceptable (in the sense 
that a uniform quantitative result is recoverable), as long as C = 0(h(E)). 

It will be demonstrated that if P is the image of a iT-rational point under 
an isogeny, then B n p/Bp being a power of a prime is a non-trivial quasi- 
integrality condition. The function field case indicates that one would not 
expect this to be true more generally. 

Lemma 2.6. Let a : E' — > E be an isogeny of minimal elliptic curves over 
K , and suppose that P = cr(P') for some P' £ E'(K). If B n p / Bp is a power 
of a single prime, then either nP is (e\, C\)- quasi-integral, with Ex = ^ + ^; 
and C\ = 0(h(E) + h(m) + h{n)), or nP' is (£2,02) -quasi-integral, with 
£2 = % and C 2 = 0{h(E') + h(m)). 

Proof. Suppose that B n p/Bp is a power of a single prime. Note that, by 
Lemma [231 v(B n p/) ^ v(B n p) for all v £ M 1 ^. Suppose, for the moment, 
that v(B n pi) ^ v{Bp) for all v G M^. In this case, 

h(B nP ,) sC h(B P ) 

^ h{P) 

^ h{P)+0{h{E)) 

< —h{nP') + 0{h{E') + h{m)). 
n z 

Now suppose that this is not the case, in other words, v(B n pi) > v(Bp) 
for some prime v £ M^- Then v(B n p/ Bp) > 0, and this is the only prime 
for which this happens. Furthermore, from Lemma 12.31 

v(B nP /Bp) ^ v(B nP ) ^ v(B np/ ) + h{m). 

In particular, 

h{B nP ) ^ h{B P ) + h{B nPI ) + h(m) + h{n) 

^ h(Bp) + h(B nPI ) + 0(h{E) + h(E') + h(m) + h{n)) 

^ (\ + — )h(nP) + 0(h(E) + h(m) + h(n)). 
\rr m J 

□ 

It has been known for a long time that sequences of the form ([1]) do 
produce new primes in a weaker sense. Zsigmondy's Theorem [Mj guarantees 
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a new prime factor for all terms with index n > 6. The definition is made 
precise now. 

Definition 2.7. A nonzero term B n in a sequence (B n ) of elements in Ok 
has a primitive divisor d if 

(I) d is not a unit 
(II) d | B n 

(III) gcd(i? m , d) is a unit for all m < n with B m / 0. 

Silverman [28] proved the elliptic analogue of Zsigmondy's Theorem: in 
any elliptic divisibility sequence B = (B n ), all the terms from some index 
onwards will have a primitive divisor. This theorem has been proved in a 
strong uniform manner in [16] (see also [8] and [13]) and and will be used 
crucially in the following proof. 

Proof of Theorem 12.11 in the rational case. It will be shown that 
for every 5 > there is a constant Mg depending only on 5 such that 
for every pair of minimal elliptic curves E',E/Q equipped with a non-trivial 
isogeny a : E' —* E, and every point P = cr(P') with p(P', E') ^ 5, there 
are at most M§ values n such that B n p/Bp is a prime power. 

The style of proof depends upon whether the isogeny is cyclic. Firstly, 
assume that P £ kE(Q) for some integer k ^ 2. Then P £ qE(Q) for some 
prime q, and it may be assumed that k is prime. 

Suppose there are distinct non-archimedean valuations v\ and V2 such 
that 

vi(B nkP >) > and vi(B k p>) = 

and 

V2{B n p<) > and v 2 {B gcA{Kn)P ,) = 0. 
Then clearly v\{B n p / Bp) > 0. On the other hand, ^(-B/cP') = 0, as 
V2(B gcd ^ n)pr ) = mm{v 2 (B n p l ),v 2 (B k p l )}, 

and so V2(B n p / Bp) > 0. Thus if B n p/Bp is a prime power, then either: 

(a) the primes diving B nk p' are at most those dividing B k p' or 

(b) the primes diving B n pi are at most those dividing -B gc d(fc,n)P' • 

Let Z{P' , E') denote the set of s such that B s pi has no prime divisors other 
than those dividing B t pi for t < s. In case (a), the term B nk pi in the 
elliptic divisibility sequence defined by P' has no primitive divisor, and so 
nk G Z(P',E'). If (b) holds, and if gcd(/c,n) < n, then n £ Z(P',E'). 
Thus, if B n p/Bp is a prime power, then either n \ k (and recall that k 
is assumed to be prime) or n € Z(P',E') U rZ(P' , E'). By Theorem 7 of 
[16] . #Z(P', E') may be bounded solely in terms of p(P' , E') (Note that the 
statement in [16j is not in terms of p(P',E'), but a simple modification of 
the proof shows that this is true). Thus the number of n such that B n p/Bp 
is a prime power is bounded by some M$ t \ which depends only on 5. 
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So now suppose P kE(Q) for any integer k ^ 2. It follows that a is a 
composition of cyclic isogenies over Q, and so it may be assumed (without 
loss of generality) that a itself is cyclic. In particular, there are (by work 
of Mazur |20| ) only finitely many possible values for m = deg(cr). Thus 
Lemma 12.61 replacing h(m) with a sufficiently large constant, tells us that 
if B n p/Bp is a prime power, then either nP is (si, Ci)-quasi- integral, with 
E\ = -^z + -^ and C\ = 0(h(E) + h(n)), or nP' is (e2, C2)-quasi-integral, with 
£2 = and C 2 = 0(h(E')). If < |, there is a bound on the number of 
points satisfying the latter condition depending only on p(P',E'). Clearly 
the number of n such that ^ > | is bounded absolutely. 

Now note that p(P',E') ^ 5 and Lemma E3] implies that p(P,E) ^ 62 
for some 82 > 0. Thus, the first condition above becomes 

h{B nP ) ^ (± + 1 J h(nP) + 0(fc(S) + fc(n)). 

Finally, for any C and any £3 > 0, we can ensure that Ch{n) < 5%h(nP) by 
taking n large enough. Thus the above becomes 

h(B nP ) < f ^ + - + 5 3 ) h(nP) + 0(h(E)) 

for sufficiently large n, where ^3 may be taken as any positive value. Apply- 
ing the quantitative Siegel Theorem, the proof is complete. □ 

Remark 2.8. Work of the second author |14| I15j. in the case K = Q, also 
assuming Lang's Conjecture, can be applied to produce a uniform bound 
M such that for any elliptic divisibility sequence generated by a magnified 
point P on a minimal curve, there are at most two values n > M such that 
B n p is a prime power. 

In the function field stronger version of Theorem 12 . 1 1 will be proved, 

namely, that there is a uniform bound Nq such that B n jB\ is not a prime 
power for all n ^ Nq. First, one lemma is required. 

Lemma 2.9. Let K = Q(t) and let B = (B n ) be an elliptic divisibility 
sequence arising from a non-torsion point on a minimal elliptic curve defined 
over K . There is a uniform bound on the indices n for which B n fails to 
have a primitive divisor. 

Lemma 12.91 will be proved in an explicit way later - see Theorem 13.101 

Proof of Theorem 12.11 in the function field case. Lemma l2T6l shows 
that if B n p/Bp is a prime power, then 

h(B nP ) < ( I + J- ) h{nP) + 0(h(E)) 

or 

K-BnP')^ (^) h(nP') + 0(h(E')). 
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If n ^ \/2m and m ^ 2, then this implies 

h(B nP ) ^ jh(nP) + 0{h{E)) 

or 

h(B nPI ) < ^(ni") + 0(/»(tf)), 

respectively. As /?(P, P) and P') may be bounded below by some ab- 
solute, positive value, it follows that the number of such n must be bounded 
uniformly. 

To show that n itself must be bounded, note that if P € kE(Q(t)) for 
some integer k ^ 2 then the existence of a primitive divisor may be used 
exactly as in the proof in the rational case - the boundedness of n follows 
using Lemma 12.91 In the case of a cyclic isogeny, the structure of the proof 
follows the rational case. The differences are: Lang's conjecture is known 
to be true; a uniform bound for the degree of the isogeny follows from the 
existence of the same in the rational case since, for any isogeny over of 
elliptic curves over Q(i), some specialization will be an isogeny of elliptic 
curves over Q; and Lemma 12.91 implies a quantitative Siegel Theorem in 
which the index n is bounded. □ 

That n itself may be bounded in the above argument is already suggested 
by Proposition 8.2 of TlJ. In Section [3] below we will work out some explicit 
bounds, in particular the explicit bound given in Theorem 11.51 

3. The Function Field Case 

3.1. Explicit Bounds for Q(t). Over Q(t), Theorem 11.51 raises the possi- 
bility of finding all the irreducible terms in particular cases. The bound of 
4160366 comes from applying the general version of Lang's conjecture |llj . 
assuming also the maximal possible degree for a cyclic isogeny. As it stands, 
this is useless: checking the terms coming from smaller indices involves test- 
ing rational polynomials for irreducibility which have degrees well in excess 
of one billion. In particular cases, the problem is circumvented by obtaining 
a more nuanced version of Lang's conjecture (which takes account of the 
reduction of small multiples of P, see Theorem \3.5\i together with Theo- 
rem [3J21 which highlights the dependence upon the degree of the isogeny. 
This technique allows us to exhibit examples of elliptic divisibility sequences 
where all of the prime (= irreducible) terms can be computed. 

Example 3.1. Consider 

E :y 2 = x 3 + t 2 (l - t 2 )x with P = [t 2 ,t 2 ]. 

Then B n /Bi = B n fails to be a prime power for all n ^ 3. Note that the 
point P is magnified by a 2-isogeny as detailed in [U Chapter 14]. 

On the other hand, it is worth probing the deeper difference between the 
cases when K = Q and K = Q(i) which is probably at work in general. It 
is easy to prove that the polynomial (t n — !)/(£ — 1) is irreducible for every 
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prime index n. An analogous statement seems to be true for some elliptic 
divisibility sequences over function fields. The two curves in Example 13.21 
appeared in [11] as examples where the global canonical height of a point is 
small: 

Example 3.2. The point P = [0, 0] on the curve 

E : y 2 + xy + (t + l)t 2 y = x 3 + t 2 x 2 

produces terms B n p which are irreducible for all primes n from 5 to 199. 
The point P = [0, 0] on the curve 

E : y 2 + xy + (t + l)t 3 y = x 3 + t 3 x 2 

produces terms B n p which are irreducible for all primes n from 5 to 199. 

More surprisingly, there seem to be examples where irreducibility occurs 
along prime indices in a fixed residue class. 

Example 3.3. The point P = [1 — t, 1 — t] on the curve 

E :y 2 = x 3 + t(l-t)x 

produces irreducible terms B n p whenever n ^ 79 is a prime congruent to 3 
(mod 4). 

That B n p is composite for any prime n = 1 (mod 4) is not surprising, in 
light of results of Streng [32J for elliptic divisibility sequences arising from 
elliptic curves (over number fields) with complex multiplication. 

3.2. Lang's conjecture. 

We do not propose to make explicit the argument given in section [5l 
Instead, the technique is to work with local heights and explicit bounds for 
the difference between the naive and canonical heights. When K = Q(t) 
the infinite place oo corresponds to the valuation — deg. Without loss of 
generality, assume that E is given by a short Weierstrass form 

y 2 = x 3 + Ax + B (2) 

with A,B £ Q[t], so that A E = -16(4A 3 + 27B 2 ). Then the j-invariant j E 
of E is given by 

-1728(4A) 3 

3E = (3) 

and the height h(E) of the curve E is 

h(E) = — max(h(j E ),HA E )) = ^ max(3deg(A), 2deg(5)). 

For v any place of K, denote by X V (P) the Neron local height of P at v, and 
by h v (P) the naive local height 

h v (P) = ^max{0,-v(x(P))}. 

The first lemma compares the heights of the j-invariant and discriminant 
of E. 
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Lemma 3.4. With je as in 

Hje) < ~deg(A E ). 

Proof. Let L be the smallest Galois extension of Q(t) containing the roots 
S\, 62 and S3 = —Si — 62 of x 3 + Ax + B. Let v be a place of L above the 
place at infinity. Since x 3 + Ax + B is monic with polynomial coefficients, 
v-p{5i) ^ 0, for every finite place V of L, so that v-p(Si — Sj) ^ 0. Summing 
over all finite places of L, and using the fact that S{ — Sj has the same 
valuation at all places of the Galois extension L above the infinite place, it 
follows that v{5i — Sj) ^ 0. 

Since v is non-archimedean, at most one of the valuations v(Si — S2), 
v{2S\ + S2) and v(S\ + 28^) can be different from Tnm(v(8i), ^(^2))- In 
particular, since A# = ((Si — ^2) (2<5i + S2)(Si + 2S2)) 2 , it follows that 
v(Ae) ^ 4min(f (Si), v (82))- Hence 

v(B 2 ) = 2(v(5i) + v(S 2 ) + v(Si + 5 2 )) > 6mm(v(Si),v(S 2 )) ^ ^v(A E ). 

Summing over all places v of L above the place at infinity gives 

deg(5 2 ) < ^deg(A B ). 

The lemma is now a consequence of the inequality 

deg(.4 3 ) ^ max(deg(£ 2 ),deg(A E )) < | deg^) 

together with the definition j E = ~ l72 ^ A ^> Q f the j-invariant of E. □ 

The following is a version of Lang's conjecture, which was proved in the 
function field case by Hindry-Silverman [llj. The explicit constants ob- 
tained here, in certain special cases, use the same basic methods. 

Proposition 3.5. There is a constant c > such that, for all non-torsion 
points P G E(K), 

cdeg(A B ) ^h(P), 
where c can be taken to be the following: 

• in the general case, c = 10 -9 ' 2 ; 

• if P has everywhere good reduction, c = ^ ; 

• if P has everywhere good reduction except at infinity, c = j~ ; 

• if E does not have split multiplicative reduction (in particular, if E 
is isotrivial), c = jf^; 

• if E does not have split multiplicative reduction except at infinity (in 
particular, if E has a polynomial j -invariant) , c = 2^4- 

Proof. The first bound is the second remark on Theorem 6.1 in [II]. Assume 
now that P has everywhere good reduction except maybe at infinity. Let 
v be a valuation different from the valuation at infinity. The coefficients of 
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the chosen Weierstrass equation are polynomials. Following |18} III Theorem 
4.5], the Neron local height X v at v satisfies 

\ V (P) = lmBK{-v(x(P)),Q} + ^v(A E ) ^ -^v(A e ), 

while the Neron local height Aqo at infinity satisfies 

Aoo(P) ^ ±max{0,deg(X(P))} + A- min{0, -h(j E )} > ~h{J E ), 

for some function X on E(K). Summing over all places gives 

h(P)^±deg(A E )-±h(j E ). 
In particular, Lemma 13.41 implies 

h(P) > (l - 1) ^deg(A E ) = ±deg(A E ) 

and the third bound follows. 

Now assume P also has good reduction at infinity. Since the coefficients 
in the Weierstrass equation are not integral at infinity, a transformation 
is needed to an oo-minimal Weierstrass equation, with discriminant Aqq. 
Since the Neron local height does not depend on the choice of Weierstrass 
equation, 

Xoo{P) > ^oo(Aoo) > 0. 

Summing over all places as before, 

W > J2 £ v(Ae) = = ^eg(A E ) 

v^oo 

which gives the second bound. 

When E does not have split multiplicative reduction at v, the Kodaira- 
Neron Theorem asserts that 12P has good reduction at v. Hence the bounds 
for h(P) and the functoriality of the canonical height h{\2P) = 144/i(i- > ) give 
the final two bounds. □ 

Remark 3.6. In special cases, one can improve the constants in Theo- 
rem 13.51 by a more careful analysis of the reduction types at bad primes. 
Moreover, even when E has split multiplicative reduction, the Kodaira- 
Neron Theorem gives a good constant also when there is a small common 
multiple of all the valuations of the discriminant Ae (for example if it is 
squarefree) . 

3.3. Naive and canonical heights. 

In order to estimate the difference between the naive and canonical heights 
of a point, pass to the local heights. The most difficult of these is the height 
at infinity, which is addressed first. 
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Lemma 3.7. For P G E(K), 

-| + A min(0, < A oc (P)-/ loo (P) < h(E) + ^ - A deg(A E ). 
b 24 b 12 

Proof. The coefficients A and B of the minimal Weierstrass equation ([2]) are 
not foo-integral. A Weierstrass equation of E with v^-integral coefficients 
is given by 

Y 2 = X 3 + t~ 4r AX + t~ Gr 

where r is the smallest integer greater than or equal to h(E). The corre- 
sponding change of variables is given by x = t 2r X and y = t 3r Y and the 
discriminant of this equation is is A ro = t~~ 12r Ae- 

Following [18, III Theorem 4.5], the Neron local height Aoo satisfies 

^min^VooO')) ^ Aoo(P) - ^ max(0, -Voo(X(P)) — ^(Aqq) 

Since 2Aoo(P) — r ^ ^ max(0, — 2r + deg(x(P))) ^ Aoo(P), this can be refor- 
mulated in terms of x(P), Ae and r as 

_ r + A min ( , Uoo (j)) < Aoo(P) - ^(P) ^ r - A deg(A B ). 

The integer r is the smallest integer greater than or equal to h(E), which is 
at most h(E) + |, and the result follow. □ 

Now the difference between naive and canonical heights can be bounded. 

Proposition 3.8. For P G E(K), 

-A deg(A £ ) - ~ < h{P) - h{P) < 1 deg(A B ) + jj 

Proof. Following [18, III Theorem 4.5], the Neron local height A„ at any 
finite place v satisfies 

±wm(0,v(j)) < A„(P) - h v {P) ^ ^v(A E ). 

Together with Lemma l3.7( and summing over all places, this gives 

~ ~ HE) - ±h(j) ^ h(P) - h(P) ^ h(E) + | 

To conclude we notice that h(j) ^ 12/i(P) and use that h(E) ^ ~ deg(A^) 
from Lemma l3.4i □ 



This subsection concludes with an estimate on the degree of the denom- 
inator of x(P), in terms of the (naive) height of P. This, in particular the 
fact that the constant | is large enough, is crucial to the explicit bounds 
later. 

Lemma 3.9. For P G E(K), 

\h(P)- ^deg(A B )^deg(P P ). 
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Proof. This uses a standard approach to Siegel's Theorem. Assume that 
h(P) = ^deg(Ap) (or we are done). Denote by i£oo the completion of K 
at the infinite valuation, and by L the algebraic closure of K^. Let v be 
the valuation on L which extends the valuation — deg on . Inserting the 
coordinates of P into the equation for E gives 

d = (A P - S 1 B%)(A P - 5 2 B 2 P )(Ap - 5 3 B 2 P ). 

This may be factored in L as 

Cf = A P - SiBp, 

because the factors of are squares in L (so they may be absorbed into 
the Ci,i = 1,2,3). 

As in the proof of Lemma [331 v(Ap) ^ \v{5i), for each i. If v(Ap) 
v(5iBp) then we have v(Ap) ^ 2v{Bp) + ^v(Ag) and nothing further is 
needed. So consider the case when v(Ap) < v{&iBp) for i = 1,2,3, or more 
precisely the case when 

v(A P ) =2v(d), i = 1,2,3. 

For i / j, 

(5j - 5i)B P = Cf- C) = (d + Cj^d - Cj) 

therefore 

B^j_^_ — Ci -\- Cj and B^j = 

Without loss of generality, assume v(Bij + ) ^ v(Bij-). 

We assert that (at least) one of the following two inequalities holds: 

2 1 
v(B 12+ ) ^ -v(B P ) + -v{5 2 - St) or 

v(B 13+ ) > \v(B P ) + ±v(6 3 - 6x). (4) 
To prove this assume that 

2 1 
v{B 12+ ) < -v(Bp) + -v{5 2 - Si) and 

v(B 13+ ) < -v(B P ) + -v(6 3 - St). (5) 

This forces 

v(B 12 -) > ^v(Bp) and u(£ 13 -) > ^v(B P ). 

Then Siegel's relation (d - C 2 ) + (C 2 - C 3 ) =C X -C 3 forces 

v(B 23 „) > ^v(Bp). 

Since lcm(B 2 2+ , B 2 3+ ) divides Bp(5 2 — 5i)(5 3 — 5±), the inequalities ([5]) imply 
v(gcd(B 12+ , B 13+ )) = v{B l2+ ) + v(B 13+ ) - v{lcm(B 12+ , B 13+ )) 

< \v{B P ). 
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Now Siegel's relation (C1+C2) — (C1+C3) = C2—C3 shows that gcd(-Bi2+, -B13J 
divides i?23-- In particular, 

-v(Bp) < v(B 23 -) < gcd( J Bi 2+ ,Si3+) < -v(Bp), 

which is absurd. 

Hence one of the inequalities ^ holds, say the first. Since 

v(B 12 -) > v(B 12+ ) and 2Ci = Bf 2+ + B^_, 

it follows that 

^v(Ap) = u(Ci) > |«(B P ) + u(<5 2 - ft) > |v(Bp) + ^(A £ ). 
To conclude, recall that v extends — deg. □ 
3.4. Primitive divisors. 

Theorem 3.10. Let P £ E(K) be a non-torsion point and let B = (B n ) 
be the elliptic divisibility sequence arising from P. There is a uniform con- 
stant Nq such that for all n iVo, B n has a primitive divisor. 

• In general, N = 190000. 

• If P has everywhere good reduction, Nq = 7. 

• If P has everywhere good reduction except at infinity, Nq = 11. 

• If E is isotrivial, Nq = 133. 

• If E has a polynomial j-invariant, Nq = 151. 

Proof. Suppose the term B n does not have a primitive divisor. Given any 
irreducible factor /, there is a d < n with f\B&. Since / also divides -B gc d(n,d) 
we may assume d is actually a divisor of n. What is more, the valuation of 
B n and Bj must be the same. It follows that if B n does not have a primitive 
divisor then B n divides Bn ; in particular, 

p\n 

deg(£ n ) ^ Vdeg(5n). 

1 * p 

p\n 

Now apply Lemma 13.91 to obtain 
3 

t 

p\n 

Proposition 13.8} with the functoriality of the canonical height, gives 



'-h(nP)-^de g (A E )^Y, h (l P )- 



I \ hn2 ~ I deg(As) ~1)~Tq de s( A ^) 



s hir [ ) — I + & eg (A E ) + |w(n), 
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where u(n) denotes the number of prime factors of n. Re-arranging, dividing 
by deg(A^) ^ 1, and applying Lang's conjecture (Proposition 13.51 with c 
equal to the constant from there) gives 




Using | — J2 P \n ^ ^ 0.297 and to(n) ^ log(n)/log(2), firstly bounds n 
roughly. Then a more careful analysis of small values of n yields the bounds 
in the Theorem. □ 

3.5. Prime powers. 

Suppose now that E' is another elliptic curve over K, defined relative 
to a minimal short Weierstrass equation with discriminant Ae', and that 
a : E' — > E is an isogeny of degree m > 1. The following is a direct 
consequence of Lemma [ 



Lemma 3.11. Suppose P' G E'(K) and P = cr(P'). Then 

Bp = Bp, Bp, (6) 

with Bp coprime to Bp,. 

We already know how to deal with isogenics of the form [k] for some 
integer k, using Theorem 13.101 From now on, we work only with cyclic 
isogenics. Note that the degree of such an isogeny is bounded as in the 
rational case (by specialization), m ^ 163, by Mazur's famous result [20] 
(see also [251 P a ge 265] ) . The explicit dependence upon the degree is shown 
in what follows. 

Theorem 3.12. Suppose B = (B n p) is an elliptic divisibility sequence gen- 
erated by a rational point P on a minimal elliptic curve. Assume P is 
magnified by a cyclic isogeny of degree m. There are uniform constants Nq 
and N\ such that for all 

n ^ max{iV"o, N\^fm}, 

B n jB\ has at least two distinct prime factors. 

• In general, N = 133034, Aq = 325865. 

• If P' has everywhere good reduction, Nq = 12, Aq = 5. 

• If P' has everywhere good reduction except at infinity, Nq = 14, Aq = 
6. 

• If E' is isotrivial, N = 140, Aq = 58. 

• If E' has a polynomial ^-invariant, Nq = 161, Aq = 67. 

PROOF of Theorem 11.51 The proof follows from Theorem 13.121 for the 
cyclic case and Theorem 13.101 if the isogeny is [k] for some integer k. The 
worst possible bound comes from assuming we have a cyclic isogeny of de- 
gree 163, together with no other special assumptions. □ 
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Proof of Theorem I3.12L Write B' = (B' n ) for the elliptic divisibility se- 
quence arising from P'. By Lemma 13.114 

— .Bi - B n B n . 
B\ 

If deg(.B n / 'B\) > deg(-B^) > deg(-Bi) then B n jB\ has two distinct prime 
factors. Begin with the first inequality. To bound deg(B n / B±) below use 
Lemma 13.91 and Proposition 13.81 This yields 

(3r) 2 \ 1 5 35 
^--lj--deg(A E )-^. (7) 

To bound deg(-B^) above use the same tools. Note that the functoriality of 
the canonical height ensures h = mh' with m ^ 2. Then 

&eg{B' n ) < h'n 2 + A deg(A E ,) + \ < -n 2 + A de g (Ai; ) + |. (8) 
lb o m 9b b 

The right hand side of ([8]) is guaranteed to be smaller than the right hand 
side of if 

n 2 A 1 , , . N 55 



h — -1 >-deg(A E ) + -. (9) 
\m J 2 24 

Applying Lang's conjecture (Proposition 13.51 with c equal to the constant 
from there), n is guaranteed to be large enough if 

This shows that deg(-B n ) > deg(-B^) for all n ^ Nq, say. Substituting in the 
values for c from Proposition 13.51 gives the stated values for iVo- 

For the second inequality, again use Lemma 13.91 and Proposition 13.81 
These give a lower bound for deg(i?^) of the form 

3 ,/ 2 9 , , 15 

l hn -32 deg ^-24- 
Similarly they give rise to an upper bound for deg(-Bi) of the form 

deg(Si) < h+ -|deg(A E ) + ^. 

lb b 

Using the relation h = mh' , what we require is guaranteed if 
, /3n 2 \ 15 , , 35 

H^- 1 J > ^ deg(AE)+ ^ <10) 

Using Lang's conjecture means we can guarantee deg(S' t ) > deg(Si) if 

2 (, 185' 
n > m 1 + 



9bc, 

Inserting the various possibilities for c gives N\. □ 
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3.6. Explicit computations. Given any particular example, it is possible 
to compute h, deg(As) and m. This data can be fed into the bounds ([9]) and 
(jlOp . Example 13 . 1 1 does not satisfy any of the special criteria in Theorem l3.12l 
so is best handled this way. The point P = [t 2 ,t 2 ] on E : y 2 = x 3 +t 2 (l — t 2 )x 
has global canonical height equal to i. It has bad reduction at t and is the 
image of a -rational point under a 2-isogeny. This data is inserted into (|9|) 
and (jlOp to obtain a reasonable bound for the indices n beyond which B n is 
reducible. Then the smaller indices can easily be checked. 

On the other hand, the point 2P = [t 4 - t 2 + |, -t 6 + ft 4 - \t 2 - \) has 
good reduction away from infinity so Theorem 13.121 can be applied directly 
to obtain a reasonable bound. Then the smaller indices can be checked 
manually to verify that for all n ^ 2, the terms B n jB\ = B n have at least 
two distinct irreducible factors. 

4. The rational case 

Explicit results, when the base field is Q, are harder to obtain. This 
is partly because Lang's conjecture is not known in general. The tables 
in Section [4721 (see also Silverman [26J Exercise 6.10(d)]) give examples of 
rational points with very small ratio /i(P)/ log A, forcing the constant in 
Lang's conjecture to be small. This small constant plays a big role in the 
determination of an upper bound on the largest index yielding a prime and 
it makes a reasonable global uniform bound on the number of prime terms 
seem a very distant prospect. On the other hand it is possible to use our 
techniques to get reasonable bounds in particular cases, for example, for 
congruent number curves: 

Example 4.1. [|9j] For 

E : y 2 = x 3 - N 2 x 

with 5 ^ N 6 N square-free, assume P lies in the image of a 2-isogeny 
and has x(P) < 0, then each term B n jB\ fails to be a prime power for all 
n ^ 8. If P is integral then B n fails to be a prime power for all n ^ 3. The 
conditions stated seem to be fulfilled for quite a few examples with small N. 
For example when N = 5 and P = [—4,6] (because —4 + 5 is a square). 
Similarly when N = 6 and P = [—2,8]. Frustratingly, each curve also gives 
rise to elliptic divisibility sequences which are untouchable by our methods; 
even to the extent that we cannot prove that only finitely many terms are 
prime. 

The heuristic argument in [5] predicts a bound for the number of prime 
terms in an elliptic divisibility sequence, provided the underlying curve is in 
minimal form. That argument can be sharpened by making an assumption 
coming from Diophantine analysis to predict a uniform bound; the details 
are given in section 14.11 below. However it cannot be adjusted to predict 
a uniform bound upon the index which yields the largest prime term. Al- 
though no such a bound is expected in general, a uniform bound in the 
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magnified case is not out of the question. The crucial issue lies within the 
realm of Diophantine approximation and will be discussed now. 

4.1. Heuristic argument. The Prime Number Theorem suggests that the 
probability a large integer N is prime is roughly 1/logiV. Therefore, if 
{xn)n^l is an increasing sequence of positive integers, this suggests that (in 
the absence of an obvious reason to believe otherwise) , the expected number 
of prime terms x n , with n ^ X, is approximately 

In particular, one should suspect that x n is prime infinitely often if and only 
if the sum in (|lip diverges as X — » oo. If x n = (a n — b n )/{a — b), then 

logx n ~ nh{a/b) asn-> oo, 

and so the sum diverges like a constant multiple of logX. All the available 
evidence supports the belief that a sequence of this form with a and b not 
both /c th powers of integers, for some k > 1, will produce prime terms at 
that rate. If x n = B n /B\, on the other hand, 

logx n ~ n 2 h(P) as n —* oo, 

where h(P) is the global canonical height of P. As a consequence, the sum 
in (lllj) converges, and it seems likely that B n jB\ is prime only finitely often. 

A sharpened version of this heuristic argument can be given. Using 
David's Theorem [4] from elliptic transcendence theory, it was argued in 
[6] that a lower bound for log-B n of the following kind holds: 

\ogB n > hn 2 - Clogn(loglogn) 4 . (12) 

The dependence of the constant C is interesting. Suppose E is minimal 
and C = 0(h(E)). Then Lang's conjecture implies that the sum in (jlip is 
uniformly bounded above: in other words, for elliptic divisibility sequences 
coming from curves in minimal form, the sequence with n th term B n /B\ 
should be a prime a uniformly bounded number of times. Note that this 
argument does not suggest a uniform bound upon the largest index n which 
yields a prime term B n /B\. Although David's Theorem is very strong, 
currently the best form of the constant C has a polynomial but non-linear 
dependence upon h(E). If a version of (|12p could be proved with a linear 
dependence on h(E) then, together with Lang's conjecture, we obtain a 
heuristic justification for the uniform primality conjecture in general. 

Failing this, a form of (|12p with a smaller main term but a linear depen- 
dence in the error term would be adequate. This technique has been used a 
number of times. This was precisely the issue in the case when K = Q(t). 
In this case, a lower bound for deg(-Bp) in terms of the height was given 
in Lemma 13.91 This is weaker than the equivalent form of (|12p in that the 
leading term is only | of what it might be. On the other hand, the error 
term is linear in h(E) (or deg(A^)). A similar device was exploited in [8] 
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to obtain a uniform primitive divisor theorem. In [8], the main term in fjl2[> 
was replaced by a term only | of what it might be. Any attempt to prove 
Conjecture 11.21 is likely to encounter this phenomenon. 

4.2. Explicit computations. Here are presented prime terms in sequences 
generated by the rational points with smallest known height, in 18 cases 
drawn from Elkies' tables. The computations were performed using Pari- 
GP [2] (for the first 6 cases) and MAGMA [T7] (for the other 12). In the 
table, 

• E is an elliptic curve given by a minimal equation as a vector \a\ , . . . , a§] 
in Tate's notation; 

• P denotes a non-torsion point in E(Q); 

• (£> n ) n6 N denotes the elliptic divisibility sequence associated to P; 

• ho denotes 1000 times the global canonical height of P 

• Co denotes 10000 times the ratio h(P)/h(E) 

• N2 denotes the maximal index for which the primality of B n has been 
tested; 

• Nq denotes the number of indices n ^ N2 such that B n = 1; 

• N\ denotes the number of indices n ^ N2 such that B n is a prime 
number; 

• iV~3 is the greatest index n ^ N2 such that B n is a prime number. 
The largest prime obtained comes from the first pair: the point 

P = [7107, 594946] 

on the curve 

E : y 2 + xy + y = x 3 + x 2 - 125615x + 61201397 
yields a prime term -B3719 with 26774 decimal digits. 
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